Trojan.Starman.6509

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'20#.#31.33.14':445
'20#.#31.112.40':445
'20#.#31.206.15':445
'20#.#31.120.68':445
'20#.#31.33.120':445
'20#.#31.233.16':139
'20#.#31.217.149':139
'20#.#31.119.234':445
'20#.#31.87.112':445
'20#.#31.60.109':445
'20#.#31.178.44':445
'20#.#31.49.217':445
'20#.#31.51.98':445
'20#.#31.204.252':445
'20#.#31.199.103':445
'20#.#31.226.18':445
'20#.#31.106.68':445
'20#.#31.60.57':445
'20#.#31.134.203':445
'20#.#31.10.214':445
'20#.#31.88.246':139
'20#.#31.124.249':139
'20#.#31.161.169':139
'20#.#31.97.2':139
'20#.#31.100.93':139
'20#.#31.19.212':139
'20#.#31.36.155':139
'20#.#31.197.53':139
'20#.#31.66.111':139
'20#.#31.214.71':139
'20#.#31.32.11':139
'20#.#31.74.36':139
'20#.#31.218.250':139
'20#.#31.125.158':139
'20#.#31.53.125':139
'20#.#31.95.23':139
'20#.#31.2.95':139
'20#.#31.30.94':139
'20#.#31.88.74':139
'20#.#31.90.88':139
'20#.#31.85.125':445
'20#.#31.186.180':445
'20#.#31.4.53':445
'20#.#31.175.172':445
'20#.#31.65.84':445
'20#.#31.233.141':445
'20#.#31.49.118':445
'20#.#31.116.219':445
'20#.#31.127.123':445
'20#.#31.21.153':445
'20#.#31.112.40':139
'20#.#31.87.112':139
'20#.#31.33.14':139
'20#.#31.33.120':139
'20#.#31.206.15':139
'20#.#31.49.45':445
'20#.#31.58.208':445
'20#.#31.21.44':445
'20#.#31.60.109':139
'20#.#31.119.234':139
'20#.#31.25.200':445
'20#.#31.0.247':445
'20#.#31.44.222':445
'20#.#31.69.183':445
'20#.#31.147.254':445
'20#.#31.45.96':445
'20#.#31.209.194':445
'20#.#31.41.163':445
'20#.#31.98.159':445
'20#.#31.50.212':445
'20#.#31.8.114':445
'20#.#31.249.8':445
'20#.#31.113.144':445
'20#.#31.43.127':445
'20#.#31.144.240':445
'20#.#31.53.242':445
'20#.#31.109.29':445
'20#.#31.90.203':445
'20#.#31.199.249':445
'20#.#31.44.200':445
'20#.#31.213.99':445
'20#.#31.24.184':445
'20#.#31.99.208':445
'20#.#31.36.155':445
'20#.#31.22.84':445
'20#.#31.151.121':445
'20#.#31.179.5':445
'20#.#31.19.11':445
'20#.#31.55.248':445
'20#.#31.135.246':445
'20#.#31.161.169':445
'20#.#31.124.249':445
'20#.#31.100.93':445
'20#.#31.30.94':445
'20#.#31.97.2':445
'20#.#31.66.111':445
'20#.#31.19.212':445
'20#.#31.214.71':445
'20#.#31.88.246':445
'20#.#31.197.53':445
'20#.#31.171.165':445
'20#.#31.65.171':445
'20#.#31.17.86':445
'20#.#31.67.93':445
'20#.#31.9.177':445
'20#.#31.40.137':445
'20#.#31.149.161':445
'20#.#31.241.210':445
'20#.#31.133.75':445
'20#.#31.219.239':445
'20#.#31.9.113':445
'20#.#31.115.86':445
'20#.#31.163.222':445
'20#.#31.38.87':445
'20#.#31.169.65':445
'20#.#31.146.242':445
'20#.#31.182.35':445
'20#.#31.103.106':445
'20#.#31.148.105':445
'20#.#31.3.29':445
'20#.#31.115.86':139
'20#.#31.67.93':139
'20#.#31.9.113':139
'20#.#31.169.65':139
'20#.#31.163.222':139
'20#.#31.182.35':139
'20#.#31.148.105':139
'20#.#31.3.29':139
'20#.#31.103.106':139
'20#.#31.146.242':139
'20#.#31.24.184':139
'20#.#31.55.248':139
'20#.#31.213.99':139
'20#.#31.22.84':139
'20#.#31.99.208':139
'20#.#31.179.5':139
'20#.#31.38.87':139
'20#.#31.151.121':139
'20#.#31.135.246':139
'20#.#31.19.11':139
'20#.#31.218.250':445
'20#.#31.74.36':445
'20#.#31.125.158':445
'20#.#31.217.149':445
'20#.#31.53.125':445
'20#.#31.95.23':445
'20#.#31.2.95':445
'20#.#31.90.88':445
'20#.#31.32.11':445
'20#.#31.88.74':445
'20#.#31.133.75':139
'20#.#31.40.137':139
'20#.#31.241.210':139
'20#.#31.9.177':139
'20#.#31.219.239':139
'20#.#31.149.161':139
'20#.#31.233.16':445
'20#.#31.65.171':139
'20#.#31.17.86':139
'20#.#31.171.165':139
'20#.#31.14.198':445
'20#.#31.4.181':445
'20#.#31.7.202':445
'20#.#31.82.46':139
'20#.#31.202.14':445
'20#.#31.110.186':445
'20#.#31.214.138':445
'20#.#31.206.56':445
'20#.#31.37.60':445
'20#.#31.125.53':445
'20#.#31.129.29':139
'20#.#31.27.7':139
'20#.#31.62.220':139
'20#.#31.188.46':139
'20#.#31.115.188':139
'20#.#31.103.36':139
'20#.#31.202.148':139
'20#.#31.36.179':139
'20#.#31.208.64':139
'20#.#31.31.213':139
'20#.#31.124.246':445
'20#.#31.198.19':445
'20#.#31.116.67':445
'20#.#31.60.148':445
'20#.#31.190.62':445
'20#.#31.245.243':445
'20#.#31.121.205':445
'20#.#31.88.169':445
'20#.#31.187.73':445
'20#.#31.19.235':445
'20#.#31.6.97':445
'20#.#31.203.150':445
'20#.#31.179.117':445
'20#.#31.17.74':445
'20#.#31.46.95':445
'20#.#31.1.155':445
'20#.#31.101.117':445
'20#.#31.221.200':445
'20#.#31.242.161':445
'20#.#31.76.242':445
'20#.#31.203.150':139
'20#.#31.242.161':139
'20#.#31.6.97':139
'20#.#31.46.95':139
'20#.#31.179.117':139
'20#.#31.101.117':139
'20#.#31.60.148':139
'20#.#31.1.155':139
'20#.#31.76.242':139
'20#.#31.221.200':139
'20#.#31.4.181':139
'20#.#31.37.60':139
'20#.#31.14.198':139
'20#.#31.202.14':139
'20#.#31.7.202':139
'20#.#31.214.138':139
'20#.#31.17.74':139
'20#.#31.110.186':139
'20#.#31.125.53':139
'20#.#31.206.56':139
'20#.#31.1.136':139
'20#.#31.78.247':139
'20#.#31.77.62':139
'20#.#31.61.135':139
'20#.#31.75.84':139
'20#.#31.25.153':139
'20#.#31.9.252':139
'20#.#31.152.125':139
'20#.#31.228.79':139
'20#.#31.125.228':139
'20#.#31.88.169':139
'20#.#31.245.243':139
'20#.#31.116.67':139
'20#.#31.124.246':139
'20#.#31.190.62':139
'20#.#31.36.241':139
'20#.#31.121.205':139
'20#.#31.198.19':139
'20#.#31.187.73':139
'20#.#31.19.235':139
'20#.#31.249.8':139
'20#.#31.199.249':139
'20#.#31.8.114':139
'20#.#31.144.240':139
'20#.#31.113.144':139
'20#.#31.109.29':139
'20#.#31.69.183':139
'20#.#31.53.242':139
'20#.#31.44.200':139
'20#.#31.90.203':139
'20#.#31.186.180':139
'20#.#31.127.123':139
'20#.#31.85.125':139
'20#.#31.65.84':139
'20#.#31.4.53':139
'20#.#31.49.118':139
'20#.#31.43.127':139
'20#.#31.233.141':139
'20#.#31.21.153':139
'20#.#31.116.219':139
'20#.#31.49.217':139
'20#.#31.134.203':139
'20#.#31.178.44':139
'20#.#31.199.103':139
'20#.#31.51.98':139
'20#.#31.106.68':139
'20#.#31.120.68':139
'20#.#31.226.18':139
'20#.#31.10.214':139
'20#.#31.60.57':139
'20#.#31.0.247':139
'20#.#31.98.159':139
'20#.#31.25.200':139
'20#.#31.147.254':139
'20#.#31.44.222':139
'20#.#31.209.194':139
'20#.#31.204.252':139
'20#.#31.45.96':139
'20#.#31.50.212':139
'20#.#31.41.163':139
'20#.#31.208.64':445
'20#.#31.129.29':445
'20#.#31.115.188':445
'20#.#31.9.252':445
'20#.#31.188.46':445
'20#.#31.36.179':445
'20#.#31.103.36':445
'20#.#31.31.213':445
'20#.#31.27.7':445
'20#.#31.62.220':445
'20#.#31.77.62':445
'20#.#31.78.247':445
'20#.#31.1.136':445
'20#.#31.36.241':445
'20#.#31.152.125':445
'20#.#31.75.84':445
'20#.#31.61.135':445
'20#.#31.125.228':445
'20#.#31.228.79':445
'20#.#31.25.153':445
'20#.#31.190.62':9988
'20#.#31.19.235':9988
'20#.#31.101.117':9988
'20#.#31.6.97':9988
'20#.#31.242.161':9988
'20#.#31.58.208':139
'20#.#31.175.172':139
'20#.#31.21.44':139
'20#.#31.36.241':9988
'20#.#31.49.45':139
'20#.#31.7.202':9988
'20#.#31.206.56':9988
'20#.#31.37.60':9988
'20#.#31.202.148':445
'20#.#31.82.46':445
'20#.#31.214.138':9988
'20#.#31.46.95':9988
'20#.#31.17.74':9988
'20#.#31.202.14':9988
'20#.#31.110.186':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней